ci2 starts bisection 2025-06-25 21:12:07.429830521 +0000 UTC m=+99942.879434748
bisecting fixing commit since 646380b087a5203408877933afdaa2b480c2bc57
building syzkaller on 77908e5f2ae80bee6d434bca762a25a0a5fc6a83
ensuring issue is reproducible on original commit 646380b087a5203408877933afdaa2b480c2bc57

testing commit 646380b087a5203408877933afdaa2b480c2bc57 gcc
compiler: Debian clang version 20.1.6 (++20250514063057+1e4d39e07757-1~exp1~20250514183223.118), Debian LLD 20.1.6
kernel signature: 7437626c3a41f546904215cf2deffc1ecec3d2e1eec11a4f4e8389407b711ab0
all runs: crashed: invalid opcode in __traceiter_sys_enter
representative crash: invalid opcode in __traceiter_sys_enter, types: [UNKNOWN]
check whether we can drop unnecessary instrumentation
disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN BUG KASAN], they are not needed
testing commit 646380b087a5203408877933afdaa2b480c2bc57 gcc
compiler: Debian clang version 20.1.6 (++20250514063057+1e4d39e07757-1~exp1~20250514183223.118), Debian LLD 20.1.6
kernel signature: 7d0906a94fba4689be411191e4fb413fed329d0959715f153e690bc3367e24e1
all runs: crashed: invalid opcode in __traceiter_sys_enter
representative crash: invalid opcode in __traceiter_sys_enter, types: [UNKNOWN]
the bug reproduces without the instrumentation
disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN BUG KASAN], they are not needed
kconfig minimization: base=5186 full=6554 leaves diff=264
split chunks (needed=false): <264>
split chunk #0 of len 264 into 5 parts
testing without sub-chunk 1/5
disabling configs for [HANG LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed
testing commit 646380b087a5203408877933afdaa2b480c2bc57 gcc
compiler: Debian clang version 20.1.6 (++20250514063057+1e4d39e07757-1~exp1~20250514183223.118), Debian LLD 20.1.6
kernel signature: a8a6a7c712814d5cf32c801723695d989d5462e1f49b9482444b36df1fd3b3c6
all runs: crashed: invalid opcode in __traceiter_sys_enter
representative crash: invalid opcode in __traceiter_sys_enter, types: [UNKNOWN]
the chunk can be dropped
testing without sub-chunk 2/5
disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN BUG KASAN], they are not needed
testing commit 646380b087a5203408877933afdaa2b480c2bc57 gcc
compiler: Debian clang version 20.1.6 (++20250514063057+1e4d39e07757-1~exp1~20250514183223.118), Debian LLD 20.1.6
kernel signature: 6c363553f87a10aa32f0db3bdc7f0495f7adb952b5c18f23a0c240379a3329e5
all runs: crashed: invalid opcode in __traceiter_sys_enter
representative crash: invalid opcode in __traceiter_sys_enter, types: [UNKNOWN]
the chunk can be dropped
testing without sub-chunk 3/5
disabling configs for [UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed
testing commit 646380b087a5203408877933afdaa2b480c2bc57 gcc
compiler: Debian clang version 20.1.6 (++20250514063057+1e4d39e07757-1~exp1~20250514183223.118), Debian LLD 20.1.6
kernel signature: c8671250517ebb4e41fa4e213c2f82460e47bc236a72fddacce9bd480f41530d
all runs: crashed: invalid opcode in __traceiter_sys_enter
representative crash: invalid opcode in __traceiter_sys_enter, types: [UNKNOWN]
the chunk can be dropped
testing without sub-chunk 4/5
disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN BUG KASAN LOCKDEP], they are not needed
testing commit 646380b087a5203408877933afdaa2b480c2bc57 gcc
compiler: Debian clang version 20.1.6 (++20250514063057+1e4d39e07757-1~exp1~20250514183223.118), Debian LLD 20.1.6
kernel signature: acc857c7afadbcf306183ecfb4249c8d7ba24e37dedf2be00c8e2e06ced86cda
all runs: crashed: invalid opcode in __traceiter_sys_enter
representative crash: invalid opcode in __traceiter_sys_enter, types: [UNKNOWN]
the chunk can be dropped
testing without sub-chunk 5/5
disabling configs for [BUG KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed
testing commit 646380b087a5203408877933afdaa2b480c2bc57 gcc
compiler: Debian clang version 20.1.6 (++20250514063057+1e4d39e07757-1~exp1~20250514183223.118), Debian LLD 20.1.6
failed building 646380b087a5203408877933afdaa2b480c2bc57: ld.lld: error: undefined symbol: wext_proc_init
ld.lld: error: undefined symbol: wext_proc_exit
ld.lld: error: undefined symbol: wext_handle_ioctl
ld.lld: error: undefined symbol: compat_wext_handle_ioctl
minimized to 52 configs; suspects: [HID_ZEROPLUS USB_NET_CDC_MBIM USB_NET_CDC_SUBSET USB_NET_CDC_SUBSET_ENABLE USB_NET_DM9601 USB_NET_GL620A USB_NET_MCS7830 USB_NET_NET1080 USB_NET_PLUSB USB_NET_RNDIS_HOST USB_NET_SMSC75XX USB_NET_SMSC95XX USB_NET_SR9700 USB_NET_SR9800 USB_NET_ZAURUS USB_OHCI_HCD USB_OHCI_HCD_PCI USB_OHCI_HCD_PLATFORM USB_OTG USB_OTG_FSM USB_PRINTER USB_SERIAL_GENERIC USB_SERIAL_PL2303 USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_TRANCEVIBRATOR USB_U_AUDIO USB_U_ETHER USB_U_SERIAL USB_WDM V4L2_ASYNC V4L2_FWNODE VIDEO_CAMERA_SENSOR WLAN WLAN_VENDOR_ATH WLAN_VENDOR_ATMEL WLAN_VENDOR_BROADCOM WLAN_VENDOR_INTERSIL WLAN_VENDOR_MARVELL WLAN_VENDOR_MEDIATEK WLAN_VENDOR_MICROCHIP WLAN_VENDOR_PURELIFI WLAN_VENDOR_RALINK WLAN_VENDOR_REALTEK WLAN_VENDOR_RSI WLAN_VENDOR_SILABS WLAN_VENDOR_ZYDAS ZEROPLUS_FF]
disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN BUG KASAN], they are not needed
testing current HEAD 36d69f6a49eb50a965ad3080f12ee8c19bc38529
testing commit 36d69f6a49eb50a965ad3080f12ee8c19bc38529 gcc
compiler: Debian clang version 20.1.6 (++20250514063057+1e4d39e07757-1~exp1~20250514183223.118), Debian LLD 20.1.6
kernel signature: 18b6793621f88e1be365425a044780c9472a9f7320a6107fb7c00091f23c6d58
all runs: crashed: invalid opcode in __traceiter_sys_enter
representative crash: invalid opcode in __traceiter_sys_enter, types: [UNKNOWN]
crash still not fixed/happens on the oldest tested release
revisions tested: 7, total time: 1h30m14.164128547s (build: 51m23.157200048s, test: 34m27.03603898s)
crash still not fixed or there were kernel test errors
commit msg: ANDROID: 16K: Use vma_area slab cache for pad VMA
crash: invalid opcode in __traceiter_sys_enter
RBP: 00007f6adde7e090 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 0000000000000000 R14: 00007f6add1b5fa0 R15: 00007ffe8eab27d8
 </TASK>
CFI failure at __traceiter_sys_enter+0x34/0x50 include/trace/events/syscalls.h:18 (target: tp_stub_func+0x0/0x10; expected type: 0x4877830c)
invalid opcode: 0000 [#1] PREEMPT SMP
CPU: 1 PID: 480 Comm: syz.6.30 Not tainted 6.1.141-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:__traceiter_sys_enter+0x34/0x50 include/trace/events/syscalls.h:18
Code: 8b 3d 10 63 19 02 4d 85 ff 74 2e 48 89 d3 49 89 f6 49 8b 07 49 8b 7f 08 4c 89 f6 48 89 da 41 ba f4 7c 88 b7 44 03 50 fc 74 02 <0f> 0b ff d0 49 83 7f 18 00 4d 8d 7f 18 75 d8 31 c0 5b 41 5e 41 5f
RSP: 0018:ffffc900009dfea8 EFLAGS: 00010a17
RAX: ffffffff8129b260 RBX: 0000000000000000 RCX: 00000000f1c00ab6
RDX: 0000000000000000 RSI: ffffc900009dff58 RDI: ffffc90000c2b000
RBP: ffffc900009dfec0 R08: 0000000000000001 R09: 000000000000000f
R10: 000000005cc8e400 R11: 0000000000000020 R12: ffff88810b4c4c00
R13: 0000000000000000 R14: ffffc900009dff58 R15: ffff8881096e7f40
FS:  00007f6adde7e6c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000002600 CR3: 00000001096ce000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 trace_sys_enter+0x3d/0x50 include/trace/events/syscalls.h:18
 syscall_trace_enter+0xf3/0x150 kernel/entry/common.c:81
 __syscall_enter_from_user_work kernel/entry/common.c:100 [inline]
 syscall_enter_from_user_mode+0x1f/0x30 kernel/entry/common.c:118
 do_syscall_64+0x24/0xa0 arch/x86/entry/common.c:77
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f6adcf8d37c
Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
RSP: 002b:00007f6adde7e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 00007f6add1b5fa0 RCX: 00007f6adcf8d37c
RDX: 000000000000000f RSI: 00007f6adde7e0a0 RDI: 0000000000000006
RBP: 00007f6adde7e090 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 0000000000000000 R14: 00007f6add1b5fa0 R15: 00007ffe8eab27d8
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__traceiter_sys_enter+0x34/0x50 include/trace/events/syscalls.h:18
Code: 8b 3d 10 63 19 02 4d 85 ff 74 2e 48 89 d3 49 89 f6 49 8b 07 49 8b 7f 08 4c 89 f6 48 89 da 41 ba f4 7c 88 b7 44 03 50 fc 74 02 <0f> 0b ff d0 49 83 7f 18 00 4d 8d 7f 18 75 d8 31 c0 5b 41 5e 41 5f
RSP: 0018:ffffc900009dfea8 EFLAGS: 00010a17

RAX: ffffffff8129b260 RBX: 0000000000000000 RCX: 00000000f1c00ab6
RDX: 0000000000000000 RSI: ffffc900009dff58 RDI: ffffc90000c2b000
RBP: ffffc900009dfec0 R08: 0000000000000001 R09: 000000000000000f
R10: 000000005cc8e400 R11: 0000000000000020 R12: ffff88810b4c4c00
R13: 0000000000000000 R14: ffffc900009dff58 R15: ffff8881096e7f40
FS:  00007f6adde7e6c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000002600 CR3: 00000001096ce000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400